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AMENDMENTS TO THE CLAIMS 
Please cancel Claims 3, 4, 15, 16, 27, and 28. 
Please amend Claims 1, 2, 13, 14, and 25, as follows: 

1 1. (Currently Amended) A method of securely invoking an access control function, 

2 the method comprising the steps of: 

3 receiving a digital signature for the access control function; 

4 generating a mapping of the access control function to the digital signature; 

5 determining that the digital signature is mapped to the access control function 

6 based on the mapping when execution of the access control function is 

7 requested; 

8 generating a mapping between access control events and access control functions: 

9 detecting that an access control event has occurred: 

10 determining that the access control event is mapped to the access control function: 

11 retrieving an executable element if the access control event is mapped to the 

12 access control function: 

13 generating a digital signature for [[a]] the retrieved executable element; 

14 determining whether the retrieved executable element matches the access control 

1 5 function by comparing the digital signature of the retrieved executable 

16 element and the digital signature for the access control function; and 

17 executing the retrieved executable element only when the retrieved executable 

1 8 element matches the access control function[[;]] ^ 

19 wh e rein a particular class d e fin e s an impl e m e ntation of th e acc e ss control 

20 function; and 
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21 r e turning data to a call e r of th e e x e cutabl e e l e ment after e x e cuting the e x e cutable 

22 e lem e nt. 

1 2. (Currently Amended) The method of Claim 1 , 

2 wherein a particular class defines an implementation of the access control 

3 function: 

4 wherein the step of receiving a digital signature includes the step of receiving a 

5 digital signature for the particular class; and 

6 wherein the step of generating a mapping includes generating a mapping between 

7 the particular class and the digital signature. 
1 3. (Canceled) 

1 4. (Canceled) 

1 5. (Previously Presented) The method of Claim 1, wherein the step of returning data 

2 further includes the executable element returning name-value pairs. 

1 6. (Previously Presented) The method of Claim 1, wherein the step of retuming data 

2 includes the executable element retuming a hash table that contains the name- 

3 value pairs. 

1 7. (Original) The method of Claim 1, wherein the method further includes the steps 

2 of: 

3 generating a mapping of a plurality of access control functions to digital 

4 signatures, wherein the plurality of access control functions include the 

5 access control function, wherein one or more classes define an 

6 implementation for each of the plurality of access control functions; and 

7 wherein each of the one or more classes belong to a superclass. 
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1 8. (Original) The method of Claim 7, further including the step of invoking a 

2 routine defined by a superclass that collects data to return to a caller of the 

3 particular class. 

1 9. (Original) The method of Claim 8, wherein the step of executing the executable 

2 element includes invoking a routine defined for the superclass. 

1 10. (Original) The method of Claim 1, wherein the step of retrieving an executable 

2 element includes retrieving byte code. 

1 11. (Original) The method of Claim 10, wherein the step of retrieving byte code 

2 includes retrieving Java byte code. 

1 12. (Original) The method of Claim 1, wherein the step of retrieving an executable 

2 element includes a first computer system retrieving byte code transmitted via a 

3 local area network from a second computer system. 

1 13. (Currently Amended) A computer-readable medium carrying one or more 

2 sequences of one or more instructions for securely invoking an access control 

3 fimction, the one or more sequences of one or more instructions including 

4 instructions which, when executed by one or more processors, cause the one or 

5 more processors to perform the steps of: 

6 receiving a digital signature for the access control function; 

7 generating a mapping of the access control function to the digital signature; 

8 determining that the digital signature is mapped to the access control function 

9 based on the mapping when execution of the access control function is 

10 requested; 

11 generating a mapping between access control events and access control fiinctions: 

12 detecting that an access control event has occurred: 
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13 determining that the access control event is mapped to the access control function: 

14 retrieving an executable element if the access control event is mapped to the 

15 access control function; 

16 generating a digital signature for [[a]] the retrieved executable element; 

1 7 determining whether the retrieved executable element matches the access control 

1 8 function by comparing the digital signature of the retrieved executable 

19 element and the digital signature for the access control function; mid 

20 executing the retrieved executable element only v^hen the retrieved executable 

2 1 element matches the access control function^-^id ^ 

22 wh e r e in a particular class defin e s an impl e m e ntation of th e acc e ss control 

23 function; and 

24 r e turning data to a call e r of th e e x e cutabl e e l e m e nt aft e r e x e cuting th e e x e cutabl e 

25 e l e ment. 

1 14. (Currently Amended) The computer-readable medium of Claim 13, 

2 wherein a particular class defines an implementation of the access control 

3 function; 

4 wherein the step of receiving a digital signature includes the step of receiving a 

5 digital signature for the particular class; and 

6 wherein the step of generating a mapping includes generating a mapping between 

7 the particular class and the digital signature. 
1 15. (Canceled) 

1 16. (Canceled) 
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1 17. (Previously Presented) The computer-readable medium of Claim 1 3, wherein the 

2 step of returning data further includes sequences of instructions for performing 

3 the step of the executable element returning name-value pairs. 

1 18. (Previously Presented) The computer-readable medium of Claim 13, wherein the 

2 step of returning data includes the executable element returning a hash table that 

3 contains the name-value pairs. 

1 19. (Original) The computer-readable medium of Claim 13, wherein the computer- 

2 readable medium further includes sequences of instructions for performing the 

3 steps of: 

4 generating a mapping of a plurality of access control functions to digital 

5 signatures, wherein the plurality of access control functions include the 

6 access control function, wherein one or more classes define an 

7 implementation for each of the plurality of access control functions; and 

8 wherein each of the one or more classes belong to a superclass. 

1 20. (Original) The computer-readable medium of Claim 19, further including 

2 sequences of instructions for performing the step of invoking a routine defined by 

3 a superclass that collects data to return to a caller of the particular class. 

1 21. (Original) The computer-readable medium of Claim 20, wherein the step of 

2 executing the executable element includes invoking a routine defined for the 

3 superclass. 

1 22. (Original) The computer-readable medium of Claim 13, wherein the step of 

2 retrieving an executable element includes retrieving byte code. 

1 23. (Original) The computer-readable medium of Claim 22, wherein the step of 

2 retrieving byte code includes retrieving Java byte code. 
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1 24. (Original) The computer-readable medium of Claim 13, wherein the step of 

2 retrieving an executable element includes a first computer system retrieving byte 

3 code transmitted via a local area network from a second computer system. 

1 25. (Currently Amended) An access control system, comprising: 

2 a processor; 

3 a memory coupled to the processor; 

4 a first mapping that maps each of a set of access control fiinctions to a digital 

5 signature of that access control fimction; 

6 the processor configured to retrieve an executable element in response to a request 

7 to execute a first access control function; 

8 the processor configured to generate a mapping between access control events and 

9 access control fiinctions: 

10 the processor configured to detect that an access control event has occurred; 

11 the processor configured to determine that the access control event is mapped to 

12 the access control fiinction; 

13 the processor configured to retrieve an executable element if the access control 

14 event is mapped to the access control fiinction: 

15 the processor configured to generate a digital signature for [[a]] the retrieved 

16 executable element; 

1 7 the processor configured to determine whether the retrieved executable element 

1 8 matches the first access control fimction by comparing the digital 

19 signature of the retrieved executable element and the digital signature for 

20 the first access control fiinction; and 
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21 th e proc e ssor configur e d to detormin e wh e th e r th e e x e cutabl e e l e m e nt match e s 

22 th e first acc e ss control function bas e d on th e digital signatur e ; 

23 the processor configured to execute the retrieved executable element when the 

24 retrieved executable element matches the first access control fimctioni-and 
25 

26 wh e r e in the s e t of acc e ss control functions ar e e ach impl e m e nt e d in a class; and 

27 th e proc e ssor configured to r e turn data to a call e r of th e e x e cutabl e el e m e nt aft e r 

28 e x e cuting th e e x e cutable e l e m e nt. 

1 26. (Original) The access control system of Claim 25, 

2 wherein the first mapping maps a class implementing one of the set of access 

3 control fianctions to a digital signature. 
1 27. (Canceled) 

1 28. (Canceled) 

1 29. (Previously Presented) The access control system of Claim 25, wherein the 

2 executable element returns name-value pairs as data. 

1 30. (Previously Presented) The access control system of Claim 25, wherein the 

2 executable element returns a hash table as data that contains the name-value pairs. 

1 31. (Original) The access control system of Claim 25, 

2 wherein the processor is configured to generate a mapping of a plurality of access 

3 control functions to digital signatures; 

4 wherein the plurality of access control functions include the access control 

5 function, wherein one or more classes define an implementation for each 

6 of the plurality of access control functions; and 

7 wherein each of the one or more classes belong to a superclass. 
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1 32. (Original) The access control system of Claim 31, further comprising said 

2 processor configured to invoke a routine defined by a superclass that collects data 

3 to return to a caller of the particular class. 

1 33. (Original) The access control system of Claim 32, wherein said processor is 

2 configured to execute the executable element by invoking a routine defined for 

3 the superclass. 

1 34. (Original) The access control system of Claim 33, wherein said executable 

2 element is byte code. 

1 35. (Original) The access control system of Claim 34, wherein said byte code 

2 includes Java byte code. 

1 36. (Original) The access control system of Claim 35, wherein said processor is 

2 configure to retrieve an executable element by retrieving byte code transmitted 

3 via a local area network. 
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